last executing test programs: 2m37.343867663s ago: executing program 4 (id=4852): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 2m37.096757003s ago: executing program 4 (id=4856): socket$inet6(0xa, 0x2, 0x3a) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0, 0x47}], 0x2}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) 2m36.999223281s ago: executing program 4 (id=4858): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40095505, 0x0) 2m36.259249472s ago: executing program 4 (id=4864): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f00000003c0)='./file0/../file0\x00', 0x4) 2m36.194160389s ago: executing program 4 (id=4866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffd) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x102e}) 2m35.888232671s ago: executing program 4 (id=4873): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001480)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x19) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2m35.759196209s ago: executing program 32 (id=4873): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001480)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x19) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 24.381645712s ago: executing program 0 (id=7263): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x80, 0x7, 0xcc, 0xee, {{0xe, 0x4, 0x2, 0x4, 0x38, 0x65, 0x0, 0x5, 0x2f, 0x0, @multicast2, @remote, {[@timestamp_prespec={0x44, 0x24, 0x62, 0x3, 0x1, [{@local, 0x4a39}, {@multicast2, 0x2}, {@multicast2, 0x8}, {@local, 0x6}]}]}}}}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05032800d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 24.229525368s ago: executing program 0 (id=7267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) 24.074650379s ago: executing program 0 (id=7269): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) io_setup(0x3fc, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 23.931079803s ago: executing program 0 (id=7273): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 23.86435301s ago: executing program 0 (id=7275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x1, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x277fffffffc, 0x0, 0x1, r2, 0x1}) 23.507516314s ago: executing program 0 (id=7278): sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 23.38972485s ago: executing program 33 (id=7278): sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 4.183886521s ago: executing program 6 (id=7576): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x5, @rand_addr=' \x01\x00', 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000020c0)=[@in6={0xa, 0x1, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}], 0x1c) 4.104997999s ago: executing program 6 (id=7578): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.98062491s ago: executing program 6 (id=7580): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r1 = fanotify_init(0x1a, 0x800) fanotify_mark(r1, 0x541, 0x40001019, r0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.764076802s ago: executing program 6 (id=7584): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f0000000100)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}, {0xa001, 0x0, 0x0, 0x0}], 0x2}) 2.339151034s ago: executing program 3 (id=7607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x270, 0x1d8, 0x190, 0x270, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffffff]}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x1, 0x8, [0x4e22, 0x4e23, 0x4e23, 0x4e23, 0x4e23, 0x4e22, 0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e23, 0x4e23, 0x4e23, 0x4e22], [0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) 2.253814734s ago: executing program 3 (id=7609): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80b04) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000180)) 2.134316307s ago: executing program 3 (id=7610): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close(0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 2.00235569s ago: executing program 3 (id=7613): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknod$loop(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) 1.841900228s ago: executing program 3 (id=7615): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84) sendto$inet6(r0, &(0x7f0000000000)="895c", 0x2, 0x40000, &(0x7f0000000040)={0xa, 0x4e23, 0xec0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) 1.745708569s ago: executing program 3 (id=7617): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.697514707s ago: executing program 2 (id=7618): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)="97"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000080)) 1.50615746s ago: executing program 1 (id=7623): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x34, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x4, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x1, 0x5}]}}}}}}}, 0x0) 1.479240327s ago: executing program 1 (id=7624): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_script(r2, &(0x7f0000000800)={'#! ', './file0'}, 0xb) tee(r1, r0, 0x9, 0x8) 1.408225413s ago: executing program 1 (id=7625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x17) 1.368749177s ago: executing program 1 (id=7626): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/155, 0x52}, {0x0, 0x30}, {&(0x7f0000000140)=""/59, 0x34}], 0x3) 1.342300555s ago: executing program 1 (id=7627): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r2, 0x401}, &(0x7f0000000180)=0x8) 1.317959813s ago: executing program 1 (id=7628): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) fsync(r1) syz_usb_disconnect(r0) 829.266123ms ago: executing program 6 (id=7633): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 776.891479ms ago: executing program 2 (id=7635): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000f40), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x1}, &(0x7f0000000240)='J', 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r2}) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001e80)={'syz', 0x1}, 0x0, r1) 707.011373ms ago: executing program 5 (id=7636): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 612.585758ms ago: executing program 2 (id=7637): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r2, 0x6}, 0x80, &(0x7f0000000400)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea59cdd8a174caf38d7adc18f6b256e8be00", 0x23}, {&(0x7f0000000540)="f861eab0bb1a8d0d1154d54ece", 0xd}], 0x3}, 0x40011) 571.581989ms ago: executing program 6 (id=7638): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff66}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000001) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10102) 435.104347ms ago: executing program 2 (id=7639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x5) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 402.35914ms ago: executing program 5 (id=7640): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) shutdown(r0, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x2, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x1005, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x8, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 239.618081ms ago: executing program 5 (id=7641): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0xffffd, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2aa, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0xba, 0x0, 0x2, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xaa76, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x7357c35c, 0x27, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xea6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x3, 0x5, 0x4, 0x40000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x800, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x1, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91e, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x10000, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000000c0)={@hyper=0x8000000, 0x1}) 179.728978ms ago: executing program 2 (id=7642): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x3}, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8}, {0x7, 0x1}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 176.296929ms ago: executing program 5 (id=7643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 81.427519ms ago: executing program 5 (id=7644): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x3) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000000)) 47.106953ms ago: executing program 2 (id=7645): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 0s ago: executing program 5 (id=7646): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) kernel console output (not intermixed with test programs): ysadm_t tclass=isdn_socket permissive=1 [ 359.132688][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 359.183441][T19165] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 359.193652][ T29] audit: type=1400 audit(367.164:977): avc: denied { relabelto } for pid=19161 comm="syz.0.5854" name="1187" dev="tmpfs" ino=6041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 359.247824][ T29] audit: type=1400 audit(367.184:978): avc: denied { associate } for pid=19161 comm="syz.0.5854" name="1187" dev="tmpfs" ino=6041 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 359.303422][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 359.313546][ T9] usb 3-1: config index 0 descriptor too short (expected 65315, got 36) [ 359.330212][ T9] usb 3-1: config 0 has too many interfaces: 239, using maximum allowed: 32 [ 359.352626][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 239 [ 359.384725][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.409977][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.431346][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 359.443296][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.454911][ T9] usb 3-1: config 0 descriptor?? [ 359.753853][ T5806] Bluetooth: hci2: command 0x0406 tx timeout [ 359.876291][ T9] hid_parser_main: 28 callbacks suppressed [ 359.876312][ T9] logitech 0003:046D:C29C.005C: unknown main item tag 0x0 [ 359.894762][ T9] logitech 0003:046D:C29C.005C: unknown main item tag 0x0 [ 359.904174][ T9] logitech 0003:046D:C29C.005C: unknown main item tag 0x0 [ 359.911815][ T9] logitech 0003:046D:C29C.005C: unknown main item tag 0x0 [ 359.920381][ T9] logitech 0003:046D:C29C.005C: unknown main item tag 0x0 [ 359.928926][ T9] logitech 0003:046D:C29C.005C: unknown main item tag 0x0 [ 359.947088][ T9] logitech 0003:046D:C29C.005C: unknown main item tag 0x0 [ 359.957188][ T9] logitech 0003:046D:C29C.005C: unknown main item tag 0x0 [ 359.972027][ T9] logitech 0003:046D:C29C.005C: unknown main item tag 0x0 [ 359.979530][ T9] logitech 0003:046D:C29C.005C: unknown main item tag 0x0 [ 359.993453][ T54] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 359.993493][ T9] logitech 0003:046D:C29C.005C: hidraw0: USB HID v0.01 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 360.172664][ T54] usb 2-1: Using ep0 maxpacket: 32 [ 360.179280][ T54] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 360.189240][ T54] usb 2-1: config 0 has no interface number 0 [ 360.209379][ T54] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 360.224195][ T54] usb 2-1: config 0 interface 85 has no altsetting 0 [ 360.234849][ T54] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 360.247514][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.256404][ T54] usb 2-1: Product: syz [ 360.260936][ T54] usb 2-1: Manufacturer: syz [ 360.265910][ T54] usb 2-1: SerialNumber: syz [ 360.274609][ T54] usb 2-1: config 0 descriptor?? [ 360.276532][ T9] logitech 0003:046D:C29C.005C: no inputs found [ 360.305811][ T9] usb 3-1: USB disconnect, device number 54 [ 360.366352][T19239] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5887'. [ 360.440723][ T10] kernel read not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 360.655102][T19257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5896'. [ 360.743344][T19262] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5898'. [ 360.752413][T19262] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5898'. [ 360.894282][ T54] appletouch 2-1:0.85: Geyser mode initialized. [ 360.901517][ T54] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input82 [ 361.092714][ T10] usb 2-1: USB disconnect, device number 62 [ 361.112711][ T54] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 361.241553][ T10] appletouch 2-1:0.85: input: appletouch disconnected [ 361.284701][ T54] usb 4-1: Using ep0 maxpacket: 8 [ 361.291561][ T54] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 361.301219][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.323390][ T54] pvrusb2: Hardware description: Terratec Grabster AV400 [ 361.338232][ T54] pvrusb2: ********** [ 361.344833][ T54] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 361.358346][ T54] pvrusb2: Important functionality might not be entirely working. [ 361.370621][ T54] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 361.383643][ T54] pvrusb2: ********** [ 361.532010][ T2338] pvrusb2: Invalid write control endpoint [ 361.623810][ T2338] pvrusb2: Invalid write control endpoint [ 361.629566][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 361.646432][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 361.656020][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 361.709849][ T2338] pvrusb2: Device being rendered inoperable [ 361.731581][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 361.740857][T19268] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 361.759876][ T24] usb 4-1: USB disconnect, device number 66 [ 361.766241][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 361.778993][ T2338] pvrusb2: Attached sub-driver cx25840 [ 361.785389][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 361.798361][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 362.711327][ T10] kernel read not supported for file /vbi8 (pid: 10 comm: kworker/0:1) [ 362.795848][ T1307] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 363.161960][T19359] loop8: detected capacity change from 0 to 524287999 [ 363.470267][T19382] vivid-000: disconnect [ 363.516316][T19376] vivid-000: reconnect [ 363.676545][T19390] tap0: tun_chr_ioctl cmd 1074025677 [ 363.682011][T19390] tap0: linktype set to 776 [ 363.725119][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 363.725130][ T29] audit: type=1400 audit(371.694:981): avc: denied { setopt } for pid=19391 comm="syz.3.5960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 363.822817][ T29] audit: type=1400 audit(371.784:982): avc: denied { unmount } for pid=14001 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 363.875152][ T29] audit: type=1400 audit(371.814:983): avc: denied { nlmsg_read } for pid=19400 comm="syz.3.5963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 364.234760][T19420] netlink: 'syz.1.5971': attribute type 13 has an invalid length. [ 364.571998][T19420] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.579354][T19420] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.721247][ T945] IPVS: starting estimator thread 0... [ 364.822597][T19435] IPVS: using max 38 ests per chain, 91200 per kthread [ 365.174822][T19420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.210251][T19420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.413135][T19420] veth1_vlan: left allmulticast mode [ 365.696294][ T1307] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.740214][ T1307] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.783808][ T1307] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.807017][ T1307] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.835654][ T1307] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.835686][ T1307] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.835719][ T1307] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.835743][ T1307] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.081231][T19472] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.251795][T19472] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.412135][T19472] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.595361][T19472] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.944724][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.956825][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.012904][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.034238][T19518] netlink: 'syz.2.6016': attribute type 12 has an invalid length. [ 367.046503][T19514] block nbd1: NBD_DISCONNECT [ 367.051479][T19514] block nbd1: Send disconnect failed -32 [ 367.054173][T19518] netlink: 'syz.2.6016': attribute type 5 has an invalid length. [ 367.060036][T19514] block nbd1: shutting down sockets [ 367.092587][T19518] netlink: 'syz.2.6016': attribute type 2 has an invalid length. [ 367.100367][T19518] netlink: 'syz.2.6016': attribute type 7 has an invalid length. [ 367.123147][T19518] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6016'. [ 367.219606][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.439873][T19532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6024'. [ 367.489366][T19532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6024'. [ 368.056481][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 368.113289][ T5883] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 368.200412][ T9] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 368.211095][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.230354][ T9] usb 2-1: config 0 descriptor?? [ 368.241590][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 368.257618][ T5883] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.268810][ T5883] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 368.279243][ T5883] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 368.291739][ T5883] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 368.292878][T19562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6036'. [ 368.302435][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.311890][T19562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6036'. [ 368.331928][T19551] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 368.349910][ T5883] hub 1-1:1.0: bad descriptor, ignoring hub [ 368.356757][ T5883] hub 1-1:1.0: probe with driver hub failed with error -5 [ 368.371431][ T5883] cdc_wdm 1-1:1.0: skipping garbage [ 368.377872][ T5883] cdc_wdm 1-1:1.0: skipping garbage [ 368.396953][ T5883] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 368.404611][ T5883] cdc_wdm 1-1:1.0: Unknown control protocol [ 368.445689][ T9] gp8psk: usb in 128 operation failed. [ 368.457930][ T9] gp8psk: usb in 137 operation failed. [ 368.465044][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 368.487512][ T9] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 368.497396][ T9] usb 2-1: media controller created [ 368.520271][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 368.570236][ T9] gp8psk_fe: Frontend attached [ 368.578764][ T9] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 368.610024][ T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 368.690179][ C1] wdm_int_callback: 143 callbacks suppressed [ 368.690204][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 368.702777][ C1] wdm_int_callback: 143 callbacks suppressed [ 368.702796][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 368.715220][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 368.721815][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 368.728289][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 368.734891][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 368.840497][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 368.847130][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 368.853432][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 368.860026][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 368.867274][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 368.873872][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 368.881157][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 368.887769][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 368.894856][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 368.901458][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 368.907605][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 368.916786][ T9] gp8psk: usb in 137 operation failed. [ 368.922250][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 368.933850][ T9] gp8psk: found Genpix USB device pID = 203 (hex) [ 368.942859][ T9] usb 2-1: USB disconnect, device number 63 [ 369.032894][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 369.048756][ T5917] usb 1-1: USB disconnect, device number 58 [ 369.206499][ T29] audit: type=1400 audit(1145.232:984): avc: denied { read write } for pid=19590 comm="syz.2.6049" name="file0" dev="tmpfs" ino=2214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 369.230580][ T29] audit: type=1400 audit(1145.232:985): avc: denied { open } for pid=19590 comm="syz.2.6049" path="/430/file0" dev="tmpfs" ino=2214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 369.375099][T19602] option changes via remount are deprecated (pid=19601 comm=syz.3.6054) [ 369.385945][T19602] cgroup: option or name mismatch, new: 0x0 "tmpfs", old: 0x0 "" [ 369.590120][ T5917] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 369.669257][ T9] kernel write not supported for file /vcs1 (pid: 9 comm: kworker/0:0) [ 369.751720][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 369.763438][ T5917] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 369.784334][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.824379][ T5917] pvrusb2: Hardware description: Terratec Grabster AV400 [ 369.840660][ T5917] pvrusb2: ********** [ 369.857185][ T5917] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 369.894451][ T5917] pvrusb2: Important functionality might not be entirely working. [ 370.003818][ T5917] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 370.005394][T19632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6066'. [ 370.020643][ T5917] pvrusb2: ********** [ 370.029673][ T2338] pvrusb2: Invalid write control endpoint [ 370.082720][ T2338] pvrusb2: Invalid write control endpoint [ 370.088729][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 370.098546][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 370.106153][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 370.119843][ T2338] pvrusb2: Device being rendered inoperable [ 370.139686][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 370.151642][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 370.167483][ T2338] pvrusb2: Attached sub-driver cx25840 [ 370.174889][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 370.212063][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 370.261218][T19598] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 370.283646][ T5917] usb 3-1: USB disconnect, device number 55 [ 370.456560][ T945] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 370.610733][ T945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.637669][ T945] usb 1-1: New USB device found, idVendor=1e71, idProduct=2006, bcdDevice= 0.00 [ 370.657207][ T945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.669579][ T945] usb 1-1: config 0 descriptor?? [ 371.075299][ T945] nzxt-smart2 0003:1E71:2006.005D: unbalanced delimiter at end of report description [ 371.097730][ T945] nzxt-smart2 0003:1E71:2006.005D: probe with driver nzxt-smart2 failed with error -22 [ 371.160912][ T29] audit: type=1800 audit(1147.280:986): pid=19689 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.6092" name="bus" dev="tmpfs" ino=6191 res=0 errno=0 [ 371.293540][ T945] usb 1-1: USB disconnect, device number 59 [ 371.413651][T19701] netlink: set zone limit has 4 unknown bytes [ 371.956413][ T29] audit: type=1400 audit(1148.120:987): avc: denied { getopt } for pid=19736 comm="syz.0.6115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 371.980402][ C1] sd 0:0:1:0: [sda] tag#188 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 371.990751][ C1] sd 0:0:1:0: [sda] tag#188 CDB: Read(6) 08 00 00 00 00 00 00 00 00 00 00 00 [ 372.056769][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 372.228692][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.249797][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.276205][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 372.293405][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.316040][ T9] usb 3-1: config 0 descriptor?? [ 372.375731][T19763] overlay: Unknown parameter '/' [ 372.472416][T19767] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6128'. [ 372.716469][ T9] hid_parser_main: 150 callbacks suppressed [ 372.716513][ T9] playstation 0003:054C:0DF2.005E: unknown main item tag 0x0 [ 372.757867][ T9] playstation 0003:054C:0DF2.005E: unknown main item tag 0x0 [ 372.766605][ T9] playstation 0003:054C:0DF2.005E: unknown main item tag 0x0 [ 372.774514][ T9] playstation 0003:054C:0DF2.005E: unknown main item tag 0x0 [ 372.786788][ T9] playstation 0003:054C:0DF2.005E: unknown main item tag 0x0 [ 372.806463][T19795] 9pnet: Found fid 0 not clunked [ 372.812382][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.818684][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.852128][ T9] playstation 0003:054C:0DF2.005E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 372.914926][ T9] playstation 0003:054C:0DF2.005E: Invalid byte count transferred, expected 20 got 0 [ 372.932779][ T5917] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 372.933032][ T9] playstation 0003:054C:0DF2.005E: Failed to retrieve DualSense pairing info: -22 [ 372.961791][ T5883] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 372.971606][ T9] playstation 0003:054C:0DF2.005E: Failed to get MAC address from DualSense [ 372.990266][ T9] playstation 0003:054C:0DF2.005E: Failed to create dualsense. [ 373.000209][ T9] playstation 0003:054C:0DF2.005E: probe with driver playstation failed with error -22 [ 373.025942][T19800] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.6145'. [ 373.086930][ T5917] usb 1-1: config 0 has an invalid interface number: 111 but max is 0 [ 373.095604][ T5917] usb 1-1: config 0 has no interface number 0 [ 373.105113][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 373.119072][ T5883] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 373.125369][ T5917] usb 1-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 373.137194][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.137218][ T5883] usb 2-1: Product: syz [ 373.137232][ T5883] usb 2-1: Manufacturer: syz [ 373.137248][ T5883] usb 2-1: SerialNumber: syz [ 373.149520][ T5883] usb 2-1: config 0 descriptor?? [ 373.162802][ T5883] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 373.181006][ T54] usb 3-1: USB disconnect, device number 56 [ 373.201985][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.223455][ T5917] usb 1-1: config 0 descriptor?? [ 373.241355][ T5917] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 373.924261][T19830] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.931979][ T5883] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 373.989334][ T5883] usb 2-1: USB disconnect, device number 64 [ 374.023702][ T5917] gspca_ov534_9: reg_w failed -71 [ 374.079934][T19834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6159'. [ 374.158508][T19841] overlayfs: upper fs does not support tmpfile. [ 374.361400][ T5917] gspca_ov534_9: Unknown sensor 0000 [ 374.361472][ T5917] ov534_9 1-1:0.111: probe with driver ov534_9 failed with error -22 [ 374.397348][ T5917] usb 1-1: USB disconnect, device number 60 [ 374.439037][T19857] netlink: 'syz.3.6170': attribute type 11 has an invalid length. [ 374.587136][T19861] netlink: 'syz.3.6172': attribute type 10 has an invalid length. [ 374.970750][ T29] audit: type=1400 audit(1919.280:988): avc: denied { ioctl } for pid=19876 comm="syz.2.6179" path="socket:[65964]" dev="sockfs" ino=65964 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 375.134045][ T54] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 375.225037][T19884] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.315077][ T54] usb 2-1: Using ep0 maxpacket: 32 [ 375.328057][ T54] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.344626][ T54] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.385122][ T54] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 375.405092][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.406166][T19884] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.433658][ T54] usb 2-1: config 0 descriptor?? [ 375.540727][ T29] audit: type=1400 audit(1919.879:989): avc: denied { ioctl } for pid=19900 comm="syz.0.6190" path="socket:[66949]" dev="sockfs" ino=66949 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 375.568789][T19884] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.679749][T19884] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.836295][ T54] savu 0003:1E7D:2D5A.005F: unknown main item tag 0x0 [ 375.853983][ T54] savu 0003:1E7D:2D5A.005F: unknown main item tag 0x0 [ 375.871409][ T54] savu 0003:1E7D:2D5A.005F: unknown main item tag 0x0 [ 375.881117][ T48] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.881530][ T54] savu 0003:1E7D:2D5A.005F: unknown main item tag 0x0 [ 375.912359][ T54] savu 0003:1E7D:2D5A.005F: unknown main item tag 0x0 [ 375.941013][ T54] savu 0003:1E7D:2D5A.005F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 376.018530][ T48] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.033624][ T54] usb 2-1: USB disconnect, device number 65 [ 376.040268][ T48] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.079887][T19928] fido_id[19928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 376.105078][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.198515][T19937] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6202'. [ 376.217673][T19937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6202'. [ 376.609325][ T945] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 376.766155][ T945] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 376.785409][ T945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.799984][ T945] usb 4-1: Product: syz [ 376.809668][ T945] usb 4-1: Manufacturer: syz [ 376.819185][ T945] usb 4-1: SerialNumber: syz [ 376.838503][ T945] usb 4-1: config 0 descriptor?? [ 377.244241][ T945] usb 4-1: Firmware: major: 0, minor: 187, hardware type: ATUSB (0) [ 377.447805][ T945] usb 4-1: failed to fetch extended address, random address set [ 377.531990][ T945] usb 4-1: USB disconnect, device number 67 [ 377.761169][T19992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6227'. [ 378.248561][ T29] audit: type=1400 audit(1922.713:990): avc: denied { connect } for pid=20015 comm="syz.1.6238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 378.402223][ T9] kernel write not supported for file /snd/seq (pid: 9 comm: kworker/0:0) [ 378.549770][T20033] mkiss: ax0: crc mode is auto. [ 378.687407][ T29] audit: type=1400 audit(1923.186:991): avc: denied { setopt } for pid=20040 comm="syz.3.6250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 378.714423][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 378.743503][ T29] audit: type=1400 audit(1923.186:992): avc: denied { listen } for pid=20040 comm="syz.3.6250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 378.876921][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 378.883681][ T9] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 378.901321][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 378.909312][ T9] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 378.918792][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.951017][ T9] usb 3-1: config 0 descriptor?? [ 378.989838][T20057] openvswitch: netlink: IP tunnel dst address not specified [ 379.087049][T20059] SELinux: failed to load policy [ 379.191062][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 379.353234][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 379.362682][ T9] hid_parser_main: 3 callbacks suppressed [ 379.362700][ T9] corsair-psu 0003:1B1C:1C0D.0060: unknown main item tag 0x0 [ 379.408849][ T10] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 379.426997][ T9] corsair-psu 0003:1B1C:1C0D.0060: unknown main item tag 0x0 [ 379.434748][ T10] usb 4-1: config 0 has no interface number 0 [ 379.444831][ T9] corsair-psu 0003:1B1C:1C0D.0060: unknown main item tag 0x0 [ 379.463083][ T10] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 379.493699][ T9] corsair-psu 0003:1B1C:1C0D.0060: hidraw0: USB HID v0.05 Device [HID 1b1c:1c0d] on usb-dummy_hcd.2-1/input0 [ 379.510411][ T10] usb 4-1: config 0 interface 196 has no altsetting 0 [ 379.552369][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 379.576683][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.593367][ T9] corsair-psu 0003:1B1C:1C0D.0060: unable to initialize device (-38) [ 379.616761][ T10] usb 4-1: Product: syz [ 379.631406][ T10] usb 4-1: Manufacturer: syz [ 379.636056][ T10] usb 4-1: SerialNumber: syz [ 379.674447][ T9] corsair-psu 0003:1B1C:1C0D.0060: probe with driver corsair-psu failed with error -38 [ 379.700978][ T10] usb 4-1: config 0 descriptor?? [ 379.729315][T20055] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 379.819785][ T9] usb 3-1: USB disconnect, device number 57 [ 379.944870][ T29] audit: type=1400 audit(1924.509:993): avc: denied { map } for pid=20095 comm="syz.1.6276" path="socket:[67326]" dev="sockfs" ino=67326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 380.028695][ T54] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 380.185058][ T54] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 380.200305][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.218751][ T54] usb 1-1: Product: syz [ 380.223584][ T54] usb 1-1: Manufacturer: syz [ 380.230753][ T54] usb 1-1: SerialNumber: syz [ 380.642414][T20130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6290'. [ 380.840161][ T54] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 381.000470][ T10] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 381.029843][ T10] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 381.063397][ T54] usb 1-1: USB disconnect, device number 61 [ 381.225611][T20163] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6303'. [ 381.278790][T20168] netlink: 'syz.1.6305': attribute type 3 has an invalid length. [ 381.388856][ T29] audit: type=1400 audit(1926.021:994): avc: denied { unmount } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 381.632591][T20188] sctp: [Deprecated]: syz.2.6312 (pid 20188) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.632591][T20188] Use struct sctp_sack_info instead [ 381.745502][ T10] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 381.848880][ T9] usb 4-1: USB disconnect, device number 68 [ 381.904926][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 381.934575][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.970038][ T10] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b29, bcdDevice= 0.00 [ 382.005887][ T9] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 382.013863][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.038766][ T10] usb 2-1: config 0 descriptor?? [ 382.070086][T20211] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6319'. [ 382.204973][T20219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6321'. [ 382.247671][T20219] gretap0: entered promiscuous mode [ 382.300808][T20219] macvtap1: entered promiscuous mode [ 382.330583][T20219] macvtap1: entered allmulticast mode [ 382.358480][T20219] gretap0: entered allmulticast mode [ 382.401338][T20226] netlink: zone id is out of range [ 382.416908][T20226] netlink: zone id is out of range [ 382.449361][T20226] netlink: zone id is out of range [ 382.460777][T20226] netlink: zone id is out of range [ 382.461194][ T10] hid (null): report_id 0 is invalid [ 382.476214][T20226] netlink: zone id is out of range [ 382.485944][T20226] netlink: zone id is out of range [ 382.497150][T20226] netlink: zone id is out of range [ 382.497553][ T10] hid-corsair-void 0003:1B1C:1B29.0061: unknown main item tag 0x0 [ 382.510841][T20226] netlink: zone id is out of range [ 382.523887][T20226] netlink: zone id is out of range [ 382.533623][ T10] hid-corsair-void 0003:1B1C:1B29.0061: unknown main item tag 0x0 [ 382.560840][ T10] hid-corsair-void 0003:1B1C:1B29.0061: report_id 0 is invalid [ 382.579237][ T10] hid-corsair-void 0003:1B1C:1B29.0061: item 0 0 1 8 parsing failed [ 382.604731][ T10] hid-corsair-void 0003:1B1C:1B29.0061: parse failed (reason: -22) [ 382.642576][ T10] hid-corsair-void 0003:1B1C:1B29.0061: probe with driver hid-corsair-void failed with error -22 [ 382.694222][ T10] usb 2-1: USB disconnect, device number 66 [ 383.011322][T20249] PKCS7: Unknown OID: [5] 0.0 [ 383.016728][T20249] PKCS7: Only support pkcs7_signedData type [ 383.077961][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 383.241602][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 383.249358][ T10] usb 4-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 383.259181][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.276970][ T10] usb 4-1: config 0 descriptor?? [ 383.343059][ T945] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 383.495839][ T945] usb 1-1: Using ep0 maxpacket: 32 [ 383.506629][ T945] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 383.519242][ T945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.531166][ T945] usb 1-1: config 0 descriptor?? [ 383.672724][ T10] cypress 0003:04B4:ED81.0062: item fetching failed at offset 5/7 [ 383.683702][ T10] cypress 0003:04B4:ED81.0062: parse failed [ 383.690364][ T10] cypress 0003:04B4:ED81.0062: probe with driver cypress failed with error -22 [ 383.730775][ T945] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 383.739463][ T945] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 383.749843][ T945] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 383.757196][ T945] usb 1-1: media controller created [ 383.767841][ T945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 383.928220][ T945] az6027: usb out operation failed. (-71) [ 383.950515][ T945] az6027: usb out operation failed. (-71) [ 383.962191][ T945] stb0899_attach: Driver disabled by Kconfig [ 383.963675][T20286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6350'. [ 383.968640][ T945] az6027: no front-end attached [ 383.968640][ T945] [ 383.969005][ T945] az6027: usb out operation failed. (-71) [ 383.978337][T20286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6350'. [ 383.986095][ T945] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 384.010054][ T945] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input84 [ 384.044276][ T945] dvb-usb: schedule remote query interval to 400 msecs. [ 384.059904][ T945] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 384.086908][ T945] usb 1-1: USB disconnect, device number 62 [ 384.145694][ T945] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 384.519298][T20302] netlink: 'syz.2.6358': attribute type 21 has an invalid length. [ 384.527297][T20302] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6358'. [ 384.538627][T20302] netlink: 'syz.2.6358': attribute type 4 has an invalid length. [ 384.547189][T20302] netlink: 'syz.2.6358': attribute type 5 has an invalid length. [ 384.555733][T20302] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6358'. [ 385.392816][ T29] audit: type=1400 audit(1930.231:995): avc: denied { ioctl } for pid=20332 comm="syz.2.6372" path="socket:[67980]" dev="sockfs" ino=67980 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 385.460804][ T29] audit: type=1800 audit(1930.273:996): pid=20335 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.6371" name="file1" dev="tmpfs" ino=6534 res=0 errno=0 [ 385.629296][ T29] audit: type=1400 audit(1930.472:997): avc: denied { getopt } for pid=20342 comm="syz.0.6376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 385.725496][ T792] usb 4-1: USB disconnect, device number 69 [ 385.833517][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6379'. [ 385.843604][T20351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6380'. [ 386.134715][ T792] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 386.169489][ T29] audit: type=1400 audit(1931.039:998): avc: denied { getopt } for pid=20369 comm="syz.5.6389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 386.288076][ T792] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 386.298395][ T792] usb 1-1: config 0 has no interface number 0 [ 386.308982][ T792] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 386.320066][ T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.328443][ T792] usb 1-1: Product: syz [ 386.334411][ T792] usb 1-1: Manufacturer: syz [ 386.339013][ T792] usb 1-1: SerialNumber: syz [ 386.372870][ T792] usb 1-1: config 0 descriptor?? [ 386.504930][ T5917] kernel read not supported for file /dsp (pid: 5917 comm: kworker/1:3) [ 386.642076][T20395] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6401'. [ 386.682236][ T29] audit: type=1400 audit(1931.575:999): avc: denied { setopt } for pid=20398 comm="syz.1.6403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 386.963644][ T792] asix 1-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 386.989016][ T792] asix 1-1:0.251: probe with driver asix failed with error -524 [ 387.010123][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 387.163047][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 387.176052][ T9] usb 3-1: config 0 has an invalid interface number: 134 but max is 0 [ 387.189198][ T9] usb 3-1: config 0 has no interface number 0 [ 387.198416][ T945] usb 1-1: USB disconnect, device number 63 [ 387.200330][ T9] usb 3-1: New USB device found, idVendor=0b57, idProduct=fcbb, bcdDevice= 5.6b [ 387.225385][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.236789][ T9] usb 3-1: Product: syz [ 387.241479][ T9] usb 3-1: Manufacturer: syz [ 387.250186][ T9] usb 3-1: SerialNumber: syz [ 387.266792][ T9] usb 3-1: config 0 descriptor?? [ 387.484691][ T9] usbhid 3-1:0.134: couldn't find an input interrupt endpoint [ 387.507622][ T9] usb 3-1: USB disconnect, device number 58 [ 387.673803][T20430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.833230][T20440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6423'. [ 388.130590][T20449] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6427'. [ 388.306951][T20459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6431'. [ 388.544997][ T29] audit: type=1326 audit(1933.528:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20475 comm="syz.5.6440" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8adf79c629 code=0x0 [ 388.682526][T20484] batman_adv: batadv0: Adding interface: macvlan1 [ 388.690707][T20485] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 388.693481][T20484] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.732845][T20484] batman_adv: batadv0: Not using interface macvlan1 (retrying later): interface not active [ 388.949811][ T29] audit: type=1400 audit(1933.958:1001): avc: denied { bind } for pid=20496 comm="syz.1.6450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 388.992154][ T29] audit: type=1400 audit(1933.990:1002): avc: denied { listen } for pid=20496 comm="syz.1.6450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 389.041462][T20499] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6451'. [ 389.086560][ T945] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 389.148579][T20504] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20504 comm=syz.1.6453 [ 389.163512][T20504] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20504 comm=syz.1.6453 [ 389.176334][ T5917] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 389.258435][T20507] netlink: 165 bytes leftover after parsing attributes in process `syz.2.6455'. [ 389.280185][ T945] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 389.299656][ T945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.315892][ T945] usb 1-1: Product: syz [ 389.320376][ T945] usb 1-1: Manufacturer: syz [ 389.326041][ T945] usb 1-1: SerialNumber: syz [ 389.345628][ T5917] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 389.363456][ T5917] usb 4-1: config 0 has no interface number 0 [ 389.382933][ T5917] usb 4-1: config 0 interface 41 has no altsetting 0 [ 389.411785][ T5917] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 389.422137][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.431468][ T5917] usb 4-1: Product: syz [ 389.435688][ T5917] usb 4-1: Manufacturer: syz [ 389.440895][ T5917] usb 4-1: SerialNumber: syz [ 389.460854][ T5917] usb 4-1: config 0 descriptor?? [ 389.574368][ T945] net_ratelimit: 5 callbacks suppressed [ 389.574391][ T945] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 389.597408][ T945] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 389.609571][ T945] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 389.622625][ T945] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 389.644836][ T945] usb 1-1: USB disconnect, device number 64 [ 390.048833][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 390.192063][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 390.198608][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 390.206776][ T9] usb 2-1: config 0 has no interface number 0 [ 390.214758][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 390.224935][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.233710][ T9] usb 2-1: Product: syz [ 390.237883][ T9] usb 2-1: Manufacturer: syz [ 390.242679][ T9] usb 2-1: SerialNumber: syz [ 390.249837][ T9] usb 2-1: config 0 descriptor?? [ 390.254937][ T5917] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 390.264753][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 390.280636][ T5917] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 390.299188][ T5917] usb 4-1: USB disconnect, device number 70 [ 390.336041][ T29] audit: type=1400 audit(1935.418:1003): avc: denied { ioctl } for pid=20540 comm="syz.0.6469" path="socket:[68414]" dev="sockfs" ino=68414 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 390.487214][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 390.502877][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 390.590727][T20549] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.688618][T20549] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.752408][T20549] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.866693][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 390.870530][ T5917] usb 2-1: USB disconnect, device number 67 [ 390.882767][T20549] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 390.904438][T20549] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.908914][ T5917] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 390.951675][ T5917] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 390.967430][ T5917] quatech2 2-1:0.51: device disconnected [ 391.067919][T20562] netlink: 'syz.2.6478': attribute type 1 has an invalid length. [ 391.086190][T20562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.111350][ T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.125171][ T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.162947][ T35] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.191715][ T35] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.438945][ T945] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 391.613747][ T945] usb 3-1: Using ep0 maxpacket: 8 [ 391.631193][ T945] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 391.640555][ T945] usb 3-1: config 0 has no interface number 0 [ 391.646663][ T945] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 391.675356][T20599] random: crng reseeded on system resumption [ 391.678361][ T29] audit: type=1400 audit(1936.824:1004): avc: denied { write } for pid=20598 comm="syz.1.6496" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 391.721730][ T945] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 391.753287][ T945] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 391.766306][ T29] audit: type=1400 audit(1936.824:1005): avc: denied { open } for pid=20598 comm="syz.1.6496" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 391.801453][ T945] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 391.831367][ T945] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 391.834795][T20599] syz.1.6496 (20599) used greatest stack depth: 19672 bytes left [ 391.860386][ T945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.878127][ T945] usb 3-1: config 0 descriptor?? [ 391.896840][ T945] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 392.125057][T20622] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20622 comm=syz.1.6507 [ 392.157820][T20627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6509'. [ 392.183137][T20627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6509'. [ 392.275755][ T5816] Bluetooth: hci3: link tx timeout [ 392.282399][ T5816] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 392.302163][ T5816] Bluetooth: hci3: link tx timeout [ 392.307789][ T5816] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 392.442584][T20644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6515'. [ 392.466965][T20645] 9p: Unknown access argument 18446744073709551615: -34 [ 392.475012][T20644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6515'. [ 392.499026][T20644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6515'. [ 392.547012][T20644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6515'. [ 392.711791][ T29] audit: type=1400 audit(1937.906:1006): avc: denied { connect } for pid=20654 comm="syz.1.6524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 393.065326][T20675] xt_hashlimit: size too large, truncated to 1048576 [ 393.192469][ T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 393.347302][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.373189][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.394126][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 393.407033][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 393.419709][ T9] usb 2-1: SerialNumber: syz [ 393.536357][T20698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6542'. [ 393.647744][T20702] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6544'. [ 393.651546][ T9] usb 2-1: 0:2 : does not exist [ 393.709182][ T9] usb 2-1: USB disconnect, device number 68 [ 393.758169][ T7312] udevd[7312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.102970][ T5917] usb 3-1: USB disconnect, device number 59 [ 394.180026][ T5917] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 394.187297][T20721] __nla_validate_parse: 1 callbacks suppressed [ 394.187313][T20721] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6553'. [ 394.277832][ T5806] Bluetooth: hci3: command 0x0406 tx timeout [ 394.543459][T20743] random: crng reseeded on system resumption [ 394.872903][ T54] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 394.895950][ T54] hid-generic 0000:0000:0000.0063: hidraw0: HID v0.00 Device [syz1] on syz0 [ 395.094460][T20768] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.211923][T20771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6575'. [ 395.275182][T20758] bond0: (slave netdevsim0): Releasing backup interface [ 396.550268][ T29] audit: type=1400 audit(1941.927:1007): avc: denied { ioctl } for pid=20851 comm="syz.2.6615" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 396.708388][ T9] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 396.773006][ T10] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 396.862466][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.874279][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.897833][ T9] usb 2-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 396.916024][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.925428][ T10] usb 4-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 396.932547][ T29] audit: type=1400 audit(1942.337:1008): avc: denied { getattr } for pid=20873 comm="syz.0.6625" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=70928 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 396.944390][ T10] usb 4-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 396.983206][ T9] usb 2-1: config 0 descriptor?? [ 397.022092][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 397.028875][ T10] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 397.039034][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.061396][ T10] usb 4-1: config 0 descriptor?? [ 397.073210][T20861] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 397.387193][ T9] ntrig 0003:1B96:0012.0064: hidraw0: USB HID v0.07 Device [HID 1b96:0012] on usb-dummy_hcd.1-1/input0 [ 397.498567][ T10] dragonrise 0003:0079:0006.0065: item fetching failed at offset 1/5 [ 397.516563][ T10] dragonrise 0003:0079:0006.0065: parse failed [ 397.522819][ T10] dragonrise 0003:0079:0006.0065: probe with driver dragonrise failed with error -22 [ 397.575281][ T9] ntrig 0003:1B96:0012.0064: Firmware version: 6.9.26.13.1 (e7bc a941) [ 397.753114][ T54] usb 4-1: USB disconnect, device number 71 [ 397.770149][ T10] usb 2-1: USB disconnect, device number 69 [ 397.892521][T20904] xt_hashlimit: max too large, truncated to 1048576 [ 398.058548][T20914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6644'. [ 398.131246][T20918] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_0 [ 398.920205][T20948] team0 (unregistering): Port device team_slave_0 removed [ 398.955767][T20952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6663'. [ 398.998613][T20948] team0 (unregistering): Port device team_slave_1 removed [ 399.286238][T20960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6666'. [ 399.452233][T20965] bond1 (unregistering): Released all slaves [ 400.178506][T21009] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6689'. [ 400.443007][T21028] netlink: 'syz.1.6697': attribute type 1 has an invalid length. [ 400.470617][T21028] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6697'. [ 400.506690][T21028] netlink: 'syz.1.6697': attribute type 1 has an invalid length. [ 400.524984][T21028] netlink: 'syz.1.6697': attribute type 8 has an invalid length. [ 400.556861][T21028] netlink: 582 bytes leftover after parsing attributes in process `syz.1.6697'. [ 400.590520][T21028] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6697'. [ 400.813524][T21046] binder: 21045:21046 ioctl c0306201 2000000003c0 returned -22 [ 400.859812][ T29] audit: type=1400 audit(1952.458:1009): avc: denied { bind } for pid=21049 comm="syz.5.6707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 400.941892][T21052] netlink: 'syz.3.6709': attribute type 25 has an invalid length. [ 400.973026][T21052] netlink: 'syz.3.6709': attribute type 28 has an invalid length. [ 400.983646][T21056] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6711'. [ 401.003129][T21056] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6711'. [ 401.018836][T21056] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6711'. [ 401.127630][T21062] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe [ 401.262351][T21070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6718'. [ 402.000565][ T29] audit: type=1400 audit(1953.655:1010): avc: denied { module_load } for pid=21115 comm="syz.1.6739" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=71785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 402.054518][T21116] Invalid ELF header magic: != ELF [ 402.061469][T21118] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 402.380580][ T653] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.459398][ T653] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.542862][ T653] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.663756][ T653] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.690758][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 402.700823][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 402.711663][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 402.752515][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 402.764413][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 403.020516][ T653] bridge_slave_1: left allmulticast mode [ 403.038025][ T653] bridge_slave_1: left promiscuous mode [ 403.045577][ T653] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.070153][ T653] bridge_slave_0: left allmulticast mode [ 403.075829][ T653] bridge_slave_0: left promiscuous mode [ 403.087675][ T653] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.102490][ T653] batman_adv: batadv0: Interface deactivated: gretap1 [ 403.308856][ T5917] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 403.426276][ T653] batman_adv: batadv0: Removing interface: gretap1 [ 403.459420][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 403.465908][ T5917] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 403.483894][ T5917] usb 3-1: config 0 has no interface number 0 [ 403.491451][ T653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.502118][ T5917] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 403.511603][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.511677][ T653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.519735][ T5917] usb 3-1: Product: syz [ 403.519753][ T5917] usb 3-1: Manufacturer: syz [ 403.519767][ T5917] usb 3-1: SerialNumber: syz [ 403.525472][ T5917] usb 3-1: config 0 descriptor?? [ 403.555649][ T653] bond0 (unregistering): Released all slaves [ 403.558110][ T5917] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 403.757005][ T5917] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 403.845359][ T5917] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 403.885452][T21141] chnl_net:caif_netlink_parms(): no params data found [ 403.957261][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 404.129473][ T653] hsr_slave_0: left promiscuous mode [ 404.158741][ T653] hsr_slave_1: left promiscuous mode [ 404.164804][ T653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.175383][ T10] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 404.186873][ T653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.196381][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 404.207763][ T5917] usb 3-1: USB disconnect, device number 60 [ 404.222456][ T653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.229873][ T653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.242595][ T5917] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 404.296642][ T5917] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 404.312025][ T653] veth1_to_batadv: left promiscuous mode [ 404.319201][ T653] batadv_slave_1: left promiscuous mode [ 404.331010][ T653] veth0_macvtap: left allmulticast mode [ 404.337861][ T5917] quatech2 3-1:0.51: device disconnected [ 404.349200][ T653] veth0_macvtap: left promiscuous mode [ 404.359431][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 404.363966][ T653] veth1_vlan: left promiscuous mode [ 404.378971][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 404.397388][ T653] veth0_vlan: left promiscuous mode [ 404.400566][ T10] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 404.438482][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.478115][ T10] usb 2-1: config 0 descriptor?? [ 404.488597][T21202] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 404.716919][ T5806] Bluetooth: hci0: command tx timeout [ 404.896637][ T10] samsung 0003:0419:0001.0066: unknown main item tag 0x0 [ 404.935273][ T10] samsung 0003:0419:0001.0066: unknown main item tag 0x0 [ 404.948090][T21242] loop8: detected capacity change from 0 to 7 [ 404.953878][ T10] samsung 0003:0419:0001.0066: item fetching failed at offset 2/3 [ 404.976303][ T10] samsung 0003:0419:0001.0066: parse failed [ 404.986269][ T7312] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 404.999294][ T7312] loop8: partition table partially beyond EOD, truncated [ 405.010536][ T10] samsung 0003:0419:0001.0066: probe with driver samsung failed with error -22 [ 405.032096][ T7312] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 405.054946][ T7312] loop8: p2 start 956478 is beyond EOD, truncated [ 405.079699][T21242] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 405.089779][ T10] usb 2-1: USB disconnect, device number 70 [ 405.100667][T21242] loop8: partition table partially beyond EOD, truncated [ 405.136888][T21242] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 405.160952][T21242] loop8: p2 start 956478 is beyond EOD, truncated [ 405.254020][ T7312] udevd[7312]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 405.338728][ T7312] udevd[7312]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 405.424866][T21141] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.436756][T21141] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.444342][T21141] bridge_slave_0: entered allmulticast mode [ 405.452360][T21141] bridge_slave_0: entered promiscuous mode [ 405.466349][T21141] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.474218][T21141] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.481694][T21141] bridge_slave_1: entered allmulticast mode [ 405.489330][T21141] bridge_slave_1: entered promiscuous mode [ 405.519013][T21141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.530817][T21141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.606816][T21141] team0: Port device team_slave_0 added [ 405.627887][T21141] team0: Port device team_slave_1 added [ 405.707291][T21141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.745063][T21141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.791955][T21141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.815347][T21141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.831793][T21141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.926711][T21141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.027096][ T653] IPVS: stop unused estimator thread 0... [ 406.078835][T21141] hsr_slave_0: entered promiscuous mode [ 406.105341][T21141] hsr_slave_1: entered promiscuous mode [ 406.128847][T21141] debugfs: 'hsr0' already exists in 'hsr' [ 406.152224][T21141] Cannot create hsr debugfs directory [ 406.698368][ T5806] Bluetooth: hci0: command tx timeout [ 406.749822][ T5856] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 406.948298][ T5856] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 406.963332][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.016761][ T5856] usb 4-1: config 0 descriptor?? [ 407.033861][ T5856] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 407.367087][T21141] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 407.396590][T21141] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 407.436153][T21141] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 407.490223][T21141] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 407.686491][T21141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.731268][T21141] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.760789][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.767934][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.802059][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.809219][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.823737][ T5856] usb 4-1: USB disconnect, device number 72 [ 407.895669][T21373] __nla_validate_parse: 3 callbacks suppressed [ 407.895687][T21373] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6818'. [ 407.927316][T21373] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6818'. [ 407.943925][T21373] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6818'. [ 407.953608][T21373] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6818'. [ 408.175330][T21141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.263570][T21141] veth0_vlan: entered promiscuous mode [ 408.285142][T21141] veth1_vlan: entered promiscuous mode [ 408.324808][T21141] veth0_macvtap: entered promiscuous mode [ 408.369637][T21141] veth1_macvtap: entered promiscuous mode [ 408.440220][T21141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.493799][T21141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.539122][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.562975][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.572169][T21408] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6825'. [ 408.628444][T21411] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.6826'. [ 408.641960][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.654750][ T29] audit: type=1400 audit(1960.636:1011): avc: denied { read } for pid=21412 comm="syz.5.6827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 408.679632][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.698598][ T5806] Bluetooth: hci0: command tx timeout [ 408.887403][T21421] IPVS: persistence engine module ip_vs_pe_ not found [ 408.910703][T21424] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.054652][ T1307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.083372][ T1307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.172448][ T1307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.205549][ T1307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.345797][ T29] audit: type=1400 audit(1961.371:1012): avc: denied { listen } for pid=21446 comm="syz.3.6841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 409.382275][ T29] audit: type=1400 audit(1961.371:1013): avc: denied { accept } for pid=21446 comm="syz.3.6841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 409.602252][T21447] syz.0.6748 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 409.670889][ T5856] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 409.799517][ T54] kernel read not supported for file /dsp1 (pid: 54 comm: kworker/1:1) [ 409.833414][ T5856] usb 2-1: Using ep0 maxpacket: 16 [ 409.850233][ T5856] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 409.872439][ T5856] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 409.908503][ T5856] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 409.939540][ T5856] usb 2-1: config 1 interface 0 has no altsetting 0 [ 409.949646][ T5856] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 409.959097][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.993620][ T5856] usb 2-1: Product: syz [ 410.003964][ T5856] usb 2-1: Manufacturer: syz [ 410.008584][ T5856] usb 2-1: SerialNumber: syz [ 410.050193][ T29] audit: type=1326 audit(1962.106:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21483 comm="syz.0.6857" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee4e19c629 code=0x0 [ 410.242701][ T5856] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 71 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 410.278375][ T5856] usb 2-1: USB disconnect, device number 71 [ 410.307739][ T5856] usblp0: removed [ 410.524105][ T54] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 410.660683][ T5806] Bluetooth: hci0: command tx timeout [ 410.681680][ T54] usb 3-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 410.694444][ T54] usb 3-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 410.709359][ T54] usb 3-1: config 0 interface 0 has no altsetting 0 [ 410.716496][ T54] usb 3-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 410.725973][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.736536][ T54] usb 3-1: config 0 descriptor?? [ 410.743749][T21498] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 410.765503][ T945] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 410.802189][ T29] audit: type=1400 audit(1962.904:1015): avc: denied { write } for pid=21527 comm="syz.5.6876" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 410.918086][ T945] usb 4-1: Using ep0 maxpacket: 16 [ 410.929832][ T945] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 410.946404][ T945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.964903][ T945] usb 4-1: Product: syz [ 410.972905][ T945] usb 4-1: Manufacturer: syz [ 410.984457][ T945] usb 4-1: SerialNumber: syz [ 410.991847][ T945] usb 4-1: config 0 descriptor?? [ 411.178385][ T54] aquacomputer_d5next 0003:0C70:F010.0067: hidraw0: USB HID v0.04 Device [HID 0c70:f010] on usb-dummy_hcd.2-1/input0 [ 411.270226][ T24] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 411.354546][ T5960] usb 3-1: USB disconnect, device number 61 [ 411.452479][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 411.466026][ T24] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 411.480061][ T24] usb 1-1: config 0 has no interface number 0 [ 411.486431][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 411.511576][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 411.525683][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 411.556675][ T24] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 411.570064][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 411.587307][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.607073][ T24] usb 1-1: config 0 descriptor?? [ 411.619841][ T24] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 411.852961][T21543] ldusb 1-1:0.55: Write buffer overflow, 1 bytes dropped [ 412.779609][ T9] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 412.790118][ T9] hid-generic 0000:0000:0000.0068: hidraw0: HID v0.00 Device [syz1] on syz0 [ 413.011072][T21590] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.440970][ T945] usb_8dev 4-1:0.0 can0: sending command message failed [ 413.463399][ T945] usb_8dev 4-1:0.0 can0: can't get firmware version [ 413.567324][ T945] usb_8dev 4-1:0.0: probe with driver usb_8dev failed with error -22 [ 413.597427][ T945] usb 4-1: USB disconnect, device number 73 [ 413.787934][ T24] usb 1-1: USB disconnect, device number 65 [ 413.817804][ T24] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 413.926424][ T945] hid-generic 0005:0006:5508.0069: item fetching failed at offset 0/1 [ 414.052596][ T945] hid-generic 0005:0006:5508.0069: probe with driver hid-generic failed with error -22 [ 414.651032][T21649] pim6reg: entered allmulticast mode [ 415.640925][T21686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6944'. [ 415.786736][T21694] input: syz1 as /devices/virtual/input/input85 [ 416.233844][ T792] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 416.385562][ T792] usb 3-1: Using ep0 maxpacket: 8 [ 416.402738][ T792] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 416.415709][ T792] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 416.434718][ T792] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 416.459524][ T792] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 416.480012][ T792] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.505429][ T792] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 416.525600][ T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.759565][ T792] usb 3-1: GET_CAPABILITIES returned 0 [ 416.793373][ T792] usbtmc 3-1:16.0: can't read capabilities [ 416.885785][T21724] batman_adv: batadv0: Adding interface: dummy0 [ 416.900554][T21724] batman_adv: batadv0: Interface activated: dummy0 [ 416.985443][ T5856] usb 3-1: USB disconnect, device number 62 [ 417.444996][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 419.053000][ T945] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 419.219340][ T945] usb 3-1: unable to get BOS descriptor or descriptor too short [ 419.232092][ T945] usb 3-1: not running at top speed; connect to a high speed hub [ 419.245219][ T945] usb 3-1: config 106 has an invalid interface number: 8 but max is 0 [ 419.258090][ T945] usb 3-1: config 106 has no interface number 0 [ 419.272919][ T945] usb 3-1: config 106 interface 8 has no altsetting 0 [ 419.289268][ T945] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 419.299648][ T945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.316401][ T945] usb 3-1: Product: syz [ 419.324969][ T945] usb 3-1: Manufacturer: syz [ 419.334027][ T945] usb 3-1: SerialNumber: syz [ 419.349351][ T5806] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 419.569819][ T945] kalmia 3-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 419.588314][ T945] kalmia 3-1:106.8: probe with driver kalmia failed with error -22 [ 419.626779][ T945] usb 3-1: USB disconnect, device number 63 [ 420.367581][T21852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7021'. [ 420.645681][T21869] batadv_slave_0: entered promiscuous mode [ 420.664207][T21868] batadv_slave_0: left promiscuous mode [ 421.677010][ T29] audit: type=1400 audit(1974.315:1016): avc: denied { execute } for pid=21916 comm="syz.3.7050" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 421.701276][T21920] No memory to map [ 421.734756][T21922] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 421.787184][ T29] audit: type=1400 audit(1974.431:1017): avc: denied { ioctl } for pid=21923 comm="syz.2.7052" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 421.853231][ T5960] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 421.863597][ T29] audit: type=1800 audit(1974.525:1018): pid=21928 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.7054" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=74539 res=0 errno=0 [ 422.063392][ T5960] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 422.088316][ T5960] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 422.118190][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.158073][ T5960] usb 2-1: Product: syz [ 422.162990][ T5960] usb 2-1: Manufacturer: syz [ 422.167595][ T5960] usb 2-1: SerialNumber: syz [ 422.493065][ T5960] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 422.515590][ T5960] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 422.538626][ T5960] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 422.579911][ T5960] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 422.599616][ T5960] usb 2-1: USB disconnect, device number 72 [ 423.197176][T21950] 9p: Bad value for 'rfdno' [ 423.250956][ T29] audit: type=1400 audit(1975.921:1019): avc: denied { mounton } for pid=21948 comm="syz.5.7062" path="/584/file0" dev="tmpfs" ino=2980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 423.395818][T21952] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7064'. [ 423.505971][T21954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7063'. [ 424.312172][T21973] sctp: [Deprecated]: syz.5.7073 (pid 21973) Use of struct sctp_assoc_value in delayed_ack socket option. [ 424.312172][T21973] Use struct sctp_sack_info instead [ 425.435293][ T29] audit: type=1326 audit(1978.262:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21985 comm="syz.1.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b5b9c629 code=0x7fc00000 [ 425.511649][ T29] audit: type=1326 audit(1978.262:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21985 comm="syz.1.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3b5b9c629 code=0x7fc00000 [ 425.549279][ T29] audit: type=1326 audit(1978.262:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21985 comm="syz.1.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b5b9c629 code=0x7fc00000 [ 425.614750][ T29] audit: type=1326 audit(1978.262:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21985 comm="syz.1.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b5b9c629 code=0x7fc00000 [ 425.638279][ T29] audit: type=1326 audit(1978.262:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21985 comm="syz.1.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b5b9c629 code=0x7fc00000 [ 425.679367][ T29] audit: type=1326 audit(1978.262:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21985 comm="syz.1.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b5b9c629 code=0x7fc00000 [ 426.071572][T22016] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7092'. [ 427.052857][T22059] netlink: 'syz.2.7110': attribute type 3 has an invalid length. [ 427.254928][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 427.254945][ T29] audit: type=1400 audit(1980.173:1062): avc: denied { append } for pid=22064 comm="syz.2.7113" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 427.345838][ T29] audit: type=1400 audit(1980.215:1063): avc: denied { mount } for pid=22066 comm="syz.1.7114" name="/" dev="autofs" ino=76061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 427.368326][ T29] audit: type=1400 audit(1980.225:1064): avc: denied { unmount } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 427.626017][ T29] audit: type=1400 audit(1980.572:1065): avc: denied { accept } for pid=22088 comm="syz.1.7124" path="socket:[76106]" dev="sockfs" ino=76106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 427.810831][T22096] input: syz0 as /devices/virtual/input/input86 [ 427.853780][T22100] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7130'. [ 427.889071][T22101] Set syz1 is full, maxelem 1029 reached [ 428.140727][ T5856] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 428.304511][ T5856] usb 2-1: Using ep0 maxpacket: 32 [ 428.340609][ T5856] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.384814][ T5856] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 428.394046][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.425901][ T5856] usb 2-1: Product: syz [ 428.430287][ T5856] usb 2-1: Manufacturer: syz [ 428.434882][ T5856] usb 2-1: SerialNumber: syz [ 428.701042][T22133] netlink: 'syz.5.7144': attribute type 12 has an invalid length. [ 428.723012][ T945] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 428.750258][T22133] netlink: 'syz.5.7144': attribute type 29 has an invalid length. [ 428.758101][T22133] netlink: 148 bytes leftover after parsing attributes in process `syz.5.7144'. [ 428.773858][T22133] netlink: 'syz.5.7144': attribute type 1 has an invalid length. [ 428.784453][T22133] netlink: 'syz.5.7144': attribute type 2 has an invalid length. [ 428.793757][T22133] netlink: 11 bytes leftover after parsing attributes in process `syz.5.7144'. [ 428.889065][ T945] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 428.899022][ T945] usb 1-1: config 0 has no interface number 0 [ 428.901670][ T29] audit: type=1400 audit(1981.895:1066): avc: denied { read } for pid=22138 comm="syz.5.7146" laddr=172.20.20.10 lport=42856 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 428.913916][ T945] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 428.937802][ T945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.945816][ T945] usb 1-1: Product: syz [ 428.950061][ T945] usb 1-1: Manufacturer: syz [ 428.954676][ T945] usb 1-1: SerialNumber: syz [ 428.964395][ T945] usb 1-1: config 0 descriptor?? [ 429.019313][T22128] netlink: 'syz.3.7142': attribute type 2 has an invalid length. [ 429.343248][ T29] audit: type=1400 audit(1982.357:1067): avc: denied { create } for pid=22149 comm="syz.3.7151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 429.397986][ T29] audit: type=1400 audit(1982.420:1068): avc: denied { sys_admin } for pid=22149 comm="syz.3.7151" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 429.441275][ T5856] cdc_ncm 2-1:1.0: failed to get mac address [ 429.460539][ T5856] cdc_ncm 2-1:1.0: bind() failure [ 429.477832][ T5856] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 429.487286][ T5856] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 429.500881][ T5856] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 429.517680][ T5856] usb 2-1: USB disconnect, device number 73 [ 429.818288][ T945] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 429.833041][ T945] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 429.888164][ T945] asix 1-1:0.251: probe with driver asix failed with error -71 [ 429.941427][ T945] usb 1-1: USB disconnect, device number 66 [ 430.080877][T22165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7156'. [ 430.102673][T22165] netlink: 'syz.2.7156': attribute type 20 has an invalid length. [ 430.116162][T22165] netlink: 'syz.2.7156': attribute type 29 has an invalid length. [ 430.124775][T22165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7156'. [ 430.584558][T22192] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22192 comm=syz.3.7170 [ 430.731336][ T945] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 430.780141][ T29] audit: type=1400 audit(1983.879:1069): avc: denied { read } for pid=22200 comm="syz.2.7174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 430.895324][ T945] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 430.912370][ T945] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.941237][ T945] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 430.950296][ T945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.175970][ T945] usb 2-1: usb_control_msg returned -32 [ 431.188669][ T945] usbtmc 2-1:16.0: can't read capabilities [ 431.318775][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 431.325603][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 431.491857][T22225] overlayfs: failed to clone lowerpath [ 431.664724][ T24] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 431.837334][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 431.844236][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.856736][ T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 431.862085][ T5856] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 431.866362][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.891557][ T24] usb 4-1: config 0 descriptor?? [ 431.998097][ T792] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 432.037843][ T5856] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.048163][ T5856] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 432.057123][ T5856] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 432.072780][ T5856] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 432.082490][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.090580][ T5856] usb 3-1: Product: syz [ 432.095192][ T5856] usb 3-1: Manufacturer: syz [ 432.099782][ T5856] usb 3-1: SerialNumber: syz [ 432.109726][ T5856] cdc_mbim 3-1:1.0: skipping garbage [ 432.116828][ T5856] cdc_mbim 3-1:1.0: CDC Union missing and no IAD found [ 432.124247][ T5856] cdc_mbim 3-1:1.0: bind() failure [ 432.140966][ T792] usb 1-1: Using ep0 maxpacket: 8 [ 432.147396][ T792] usb 1-1: config 129 has an invalid interface number: 234 but max is 0 [ 432.156726][ T792] usb 1-1: config 129 has no interface number 0 [ 432.165305][ T792] usb 1-1: New USB device found, idVendor=10d2, idProduct=62a3, bcdDevice= 3.cd [ 432.174509][ T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.182859][ T792] usb 1-1: Product: syz [ 432.187018][ T792] usb 1-1: Manufacturer: syz [ 432.191651][ T792] usb 1-1: SerialNumber: syz [ 432.291194][ T24] mcp2221 0003:04D8:00DD.006A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 432.379860][ T5856] usb 3-1: USB disconnect, device number 64 [ 432.403537][ T792] usblcd 1-1:129.234: USBLCD model not supported. [ 432.420400][ T792] usb 1-1: USB disconnect, device number 67 [ 432.598863][T22246] netlink: 'syz.5.7193': attribute type 29 has an invalid length. [ 432.608124][T22246] netlink: 'syz.5.7193': attribute type 29 has an invalid length. [ 432.616763][T22246] netlink: 500 bytes leftover after parsing attributes in process `syz.5.7193'. [ 432.655562][ T792] kernel write not supported for file bpf-map (pid: 792 comm: kworker/0:2) [ 432.706400][ T792] usb 4-1: USB disconnect, device number 74 [ 432.768241][ T29] audit: type=1326 audit(1985.957:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22253 comm="syz.5.7197" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8adf79c629 code=0x0 [ 433.150627][ T24] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 433.232674][T22263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 433.277616][T22265] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 433.288080][T22265] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 433.298771][T22265] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 433.312596][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 433.319555][ T24] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.332676][ T24] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.342932][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 433.352043][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.386000][ T792] usb 2-1: USB disconnect, device number 74 [ 433.789074][ T24] mcp2221 0003:04D8:00DD.006B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 434.025423][ T24] usb 1-1: USB disconnect, device number 68 [ 434.265232][ T945] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 434.340658][T22302] loop8: detected capacity change from 0 to 7 [ 434.383170][T22302] Dev loop8: unable to read RDB block 7 [ 434.408249][T22302] loop8: unable to read partition table [ 434.418052][T22302] loop8: partition table beyond EOD, truncated [ 434.433689][T22302] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 434.443452][ T945] usb 3-1: Using ep0 maxpacket: 16 [ 434.471563][ T945] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.491942][ T945] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 434.511944][ T945] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 434.572611][ T945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 434.592762][ T945] usb 3-1: SerialNumber: syz [ 434.630409][ T945] usb 3-1: 0:2 : does not exist [ 434.857761][ T945] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 434.887349][ T945] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 434.890070][T22320] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7226'. [ 434.928361][ T945] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 434.941232][T22320] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7226'. [ 434.998883][ T945] usb 3-1: USB disconnect, device number 65 [ 434.999250][ T792] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 435.119973][T22322] netlink: 360 bytes leftover after parsing attributes in process `syz.0.7227'. [ 435.170832][ T792] usb 2-1: Using ep0 maxpacket: 8 [ 435.190600][ T792] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 435.213152][ T792] usb 2-1: config 0 interface 0 has no altsetting 0 [ 435.227578][ T792] usb 2-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 435.236636][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.263163][ T792] usb 2-1: config 0 descriptor?? [ 435.661091][ T792] waltop 0003:172F:0038.006C: item fetching failed at offset 0/5 [ 435.671889][ T792] waltop 0003:172F:0038.006C: probe with driver waltop failed with error -22 [ 435.882078][ T5856] usb 2-1: USB disconnect, device number 75 [ 436.221451][T22357] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7241'. [ 436.241820][T22357] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7241'. [ 436.440133][T22358] Process accounting resumed [ 436.699179][T22368] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7246'. [ 436.707460][T22369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.770466][ T29] audit: type=1400 audit(1990.157:1071): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 436.837691][T22372] pim6reg1: entered promiscuous mode [ 436.857185][T22372] pim6reg1: entered allmulticast mode [ 437.166338][ T945] IPVS: starting estimator thread 0... [ 437.275769][T22397] IPVS: using max 40 ests per chain, 96000 per kthread [ 437.461905][T22414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7267'. [ 437.599052][ T5856] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 437.704615][ T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 437.743556][ T5856] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 437.756839][ T5856] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 437.769276][ T5856] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 437.787324][ T5856] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 437.803672][ T5856] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 437.820145][ T5856] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 437.830692][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.839004][ T5856] usb 2-1: Product: syz [ 437.843284][ T5856] usb 2-1: Manufacturer: syz [ 437.848415][ T5856] usb 2-1: SerialNumber: syz [ 437.869891][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.891159][ T9] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 437.900916][ T5856] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 437.912261][ T5856] imon 2-1:155.0: unable to initialize intf0, err -90 [ 437.923573][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.932617][ T5856] imon:imon_probe: failed to initialize context! [ 437.941854][ T5856] imon 2-1:155.0: unable to register, err -19 [ 437.952483][ T9] usb 4-1: config 0 descriptor?? [ 437.960601][ T9] option 4-1:0.0: GSM modem (1-port) converter detected [ 438.107025][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.132656][ T945] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 438.164450][ T24] usb 4-1: USB disconnect, device number 75 [ 438.173389][ T24] option 4-1:0.0: device disconnected [ 438.215532][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.297141][ T945] usb 3-1: Using ep0 maxpacket: 32 [ 438.306929][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.314782][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 438.319870][ T945] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 438.327592][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 438.344556][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 438.352747][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 438.354976][ T945] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 438.360237][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 438.372876][ T945] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 438.391917][ T945] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 438.411935][ T945] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 438.421604][ T945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.430896][ T945] usb 3-1: Product: syz [ 438.435224][ T945] usb 3-1: Manufacturer: syz [ 438.440071][ T945] usb 3-1: SerialNumber: syz [ 438.458626][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.459824][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 438.486595][ T945] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input87 [ 438.634781][T22436] chnl_net:caif_netlink_parms(): no params data found [ 438.649072][ T13] bridge_slave_1: left allmulticast mode [ 438.660117][ T13] bridge_slave_1: left promiscuous mode [ 438.666136][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.676187][ T13] bridge_slave_0: left allmulticast mode [ 438.681832][ T13] bridge_slave_0: left promiscuous mode [ 438.687702][ T945] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 438.697121][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.708516][ T945] (id 0x00) [ 438.792630][ T945] rc_core: IR keymap rc-imon-pad not found [ 438.806885][ T945] Registered IR keymap rc-empty [ 438.825519][ T945] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 438.837523][ T945] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 438.869220][ T945] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 438.900099][ T945] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input88 [ 438.943726][ T945] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:66> initialized [ 439.026068][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.064978][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.083975][ T13] bond0 (unregistering): Released all slaves [ 439.113348][ T24] usb 3-1: USB disconnect, device number 66 [ 439.127860][T22454] gretap0: entered promiscuous mode [ 439.368255][T22436] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.375800][T22436] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.384420][T22436] bridge_slave_0: entered allmulticast mode [ 439.391882][T22436] bridge_slave_0: entered promiscuous mode [ 439.403575][T22436] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.410848][T22436] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.426068][T22436] bridge_slave_1: entered allmulticast mode [ 439.433934][T22436] bridge_slave_1: entered promiscuous mode [ 439.469777][ T13] hsr_slave_0: left promiscuous mode [ 439.479266][ T13] hsr_slave_1: left promiscuous mode [ 439.485018][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.494036][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.504956][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.512351][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.525102][ T13] veth1_macvtap: left promiscuous mode [ 439.530587][ T13] veth0_macvtap: left promiscuous mode [ 439.536938][ T13] veth1_vlan: left promiscuous mode [ 439.542154][ T13] veth0_vlan: left promiscuous mode [ 439.885326][ T13] team0 (unregistering): Port device team_slave_1 removed [ 439.904205][ T13] team0 (unregistering): Port device team_slave_0 removed [ 439.979011][T22436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.003270][T22436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.053030][T22436] team0: Port device team_slave_0 added [ 440.063538][T22436] team0: Port device team_slave_1 added [ 440.202605][T22436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.231766][T22436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.261360][T22436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.275353][T22436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.282623][T22436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.314805][T22436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.323815][ T5806] Bluetooth: hci0: command tx timeout [ 440.358907][ T9] usb 2-1: USB disconnect, device number 76 [ 440.470538][T22436] hsr_slave_0: entered promiscuous mode [ 440.482868][T22436] hsr_slave_1: entered promiscuous mode [ 440.501199][T22436] debugfs: 'hsr0' already exists in 'hsr' [ 440.507794][T22436] Cannot create hsr debugfs directory [ 440.521654][ T13] IPVS: stop unused estimator thread 0... [ 440.538020][T22506] Bluetooth: MGMT ver 1.23 [ 440.563430][T22506] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 440.878183][ T29] audit: type=1400 audit(1994.482:1072): avc: denied { append } for pid=22526 comm="syz.1.7303" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 440.948938][T22436] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 440.960766][T22436] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 440.980185][T22436] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 441.003923][T22436] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 441.019766][ T5856] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 441.025047][T22533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7304'. [ 441.053188][T22533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7304'. [ 441.148735][T22436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.171559][ T5856] usb 4-1: Using ep0 maxpacket: 32 [ 441.184588][ T5856] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 441.208588][T22436] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.217247][ T5856] usb 4-1: config 0 has no interface number 0 [ 441.226447][ T5856] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 441.239594][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.251180][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.258337][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.270304][ T5856] usb 4-1: Product: syz [ 441.274482][ T5856] usb 4-1: Manufacturer: syz [ 441.287536][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.294669][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.307288][ T5856] usb 4-1: SerialNumber: syz [ 441.325734][ T5856] usb 4-1: config 0 descriptor?? [ 441.375106][T22436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 441.969737][T22436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.289446][ T5806] Bluetooth: hci0: command tx timeout [ 442.305082][ T5856] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 442.334813][ T5856] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 442.409875][ T5856] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 442.475535][ T5856] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 442.499175][ T5856] usb 4-1: USB disconnect, device number 76 [ 442.593663][T22436] veth0_vlan: entered promiscuous mode [ 442.643328][T22436] veth1_vlan: entered promiscuous mode [ 442.724043][T22436] veth0_macvtap: entered promiscuous mode [ 442.736871][T22436] veth1_macvtap: entered promiscuous mode [ 442.764777][T22436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.787006][T22436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.826845][ T58] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.843454][ T58] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.853464][ T58] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.862594][ T58] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.998818][T22620] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.7324'. [ 443.152777][ T1307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.187406][ T1307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.275260][ T1307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.292765][ T1307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.565734][T22643] syzkaller1: entered promiscuous mode [ 443.571328][T22643] syzkaller1: entered allmulticast mode [ 443.825728][T22662] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 443.918675][T22667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.937053][T22666] IPVS: stopping backup sync thread 22668 ... [ 443.937379][T22668] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 443.977952][T22671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7344'. [ 443.989060][T22671] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7344'. [ 444.276758][ T5806] Bluetooth: hci0: command tx timeout [ 444.468998][ T29] audit: type=1400 audit(1998.240:1073): avc: denied { remount } for pid=22690 comm="syz.1.7351" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 445.268259][ T29] audit: type=1326 audit(1999.090:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22725 comm="syz.2.7366" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f30d499c629 code=0x0 [ 445.462988][T22747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7374'. [ 445.474275][T22747] block nbd1: Unsupported socket: should be TCP or UNIX. [ 445.609632][T22757] macvlan0: left allmulticast mode [ 445.615145][T22757] netlink: 'syz.1.7377': attribute type 1 has an invalid length. [ 445.623678][T22757] netlink: 'syz.1.7377': attribute type 2 has an invalid length. [ 445.673080][T22762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7380'. [ 445.905372][ T24] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 446.057994][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 446.065019][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 446.073469][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 446.083356][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 446.094215][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 446.104720][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 446.117796][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 446.126934][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.248303][ T5806] Bluetooth: hci0: command tx timeout [ 446.337952][ T24] usb 2-1: usb_control_msg returned -32 [ 446.346287][ T24] usbtmc 2-1:16.0: can't read capabilities [ 447.204204][T22815] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 447.540579][T22822] dvmrp1: entered allmulticast mode [ 447.767584][ T653] dvmrp1 (unregistering): left allmulticast mode [ 448.040711][T22847] netlink: 'syz.2.7417': attribute type 1 has an invalid length. [ 448.565422][ T5917] usb 2-1: USB disconnect, device number 77 [ 449.630585][ T29] audit: type=1400 audit(2003.657:1075): avc: denied { add_name } for pid=22918 comm="syz.5.7448" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 449.640792][ T29] audit: type=1400 audit(2003.657:1076): avc: denied { create } for pid=22918 comm="syz.5.7448" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 449.755363][ T29] audit: type=1400 audit(2003.783:1077): avc: denied { mounton } for pid=22922 comm="syz.2.7449" path=2F3637372FE91F7189591E9233614B dev="tmpfs" ino=3491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 450.215950][T22943] macvlan6: entered promiscuous mode [ 450.282779][T22943] macvlan7: entered promiscuous mode [ 450.509763][ T5856] hid-generic 0103:0004:0000.006D: unknown main item tag 0x0 [ 450.517392][ T5856] hid-generic 0103:0004:0000.006D: unknown main item tag 0x0 [ 450.524779][ T5856] hid-generic 0103:0004:0000.006D: unknown main item tag 0x0 [ 450.554447][ T5856] hid-generic 0103:0004:0000.006D: unknown main item tag 0x0 [ 450.561864][ T5856] hid-generic 0103:0004:0000.006D: unknown main item tag 0x0 [ 450.589460][ T5856] hid-generic 0103:0004:0000.006D: unknown main item tag 0x0 [ 450.607865][ T5856] hid-generic 0103:0004:0000.006D: unknown main item tag 0x0 [ 450.642426][ T5856] hid-generic 0103:0004:0000.006D: unknown main item tag 0x0 [ 450.669162][ T5856] hid-generic 0103:0004:0000.006D: unknown main item tag 0x0 [ 450.676573][ T5856] hid-generic 0103:0004:0000.006D: unknown main item tag 0x0 [ 450.714492][ T5856] hid-generic 0103:0004:0000.006D: hidraw0: HID v0.02 Device [syz0] on syz1 [ 450.816223][T22964] fido_id[22964]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 451.599585][T22995] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7475'. [ 452.762235][T23038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7496'. [ 452.791514][T23038] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7496'. [ 452.813142][T23043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.834472][T23038] geneve2: entered promiscuous mode [ 452.862762][T23038] geneve2: entered allmulticast mode [ 453.420928][ T5816] Bluetooth: hci0: command 0x0405 tx timeout [ 454.019091][ T9] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 454.045497][T23098] delete_channel: no stack [ 454.221526][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 454.230009][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 454.248522][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 454.272589][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 454.286009][ T945] kernel write not supported for file bpf-prog (pid: 945 comm: kworker/1:2) [ 454.295502][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 454.324008][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.385076][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 454.404282][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.420421][T23121] netlink: 'syz.6.7528': attribute type 29 has an invalid length. [ 454.437145][T23121] netlink: 'syz.6.7528': attribute type 29 has an invalid length. [ 454.465837][T23121] netlink: 500 bytes leftover after parsing attributes in process `syz.6.7528'. [ 454.475711][T23121] unsupported nla_type 58 [ 454.648540][ T9] usb 4-1: usb_control_msg returned -32 [ 454.661914][ T9] usbtmc 4-1:16.0: can't read capabilities [ 454.870379][ T29] audit: type=1326 audit(2009.168:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23149 comm="syz.5.7539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8adf79c629 code=0x7ffc0000 [ 454.934151][ T29] audit: type=1326 audit(2009.189:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23149 comm="syz.5.7539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8adf79c629 code=0x7ffc0000 [ 454.984850][T23157] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 454.991227][ T29] audit: type=1326 audit(2009.221:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23149 comm="syz.5.7539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8adf79c629 code=0x7ffc0000 [ 454.993560][ T945] usb 4-1: USB disconnect, device number 77 [ 455.069431][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 455.090280][ T29] audit: type=1326 audit(2009.221:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23149 comm="syz.5.7539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8adf79c392 code=0x7ffc0000 [ 455.145457][ T29] audit: type=1326 audit(2009.231:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23149 comm="syz.5.7539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8adf79c392 code=0x7ffc0000 [ 455.193262][ T29] audit: type=1326 audit(2009.231:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23149 comm="syz.5.7539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8adf79c629 code=0x7ffc0000 [ 455.233568][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 455.252063][T23168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7543'. [ 455.263989][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 455.264014][ T29] audit: type=1326 audit(2009.231:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23149 comm="syz.5.7539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8adf79c629 code=0x7ffc0000 [ 455.292527][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 455.326512][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.357260][T23168] bond0: (slave bond_slave_1): Releasing backup interface [ 455.361293][ T9] usb 3-1: Product: syz [ 455.374107][ T9] usb 3-1: Manufacturer: syz [ 455.378726][ T9] usb 3-1: SerialNumber: syz [ 455.380155][ T29] audit: type=1326 audit(2009.263:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23149 comm="syz.5.7539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f8adf79c629 code=0x7ffc0000 [ 455.407120][ T9] usb 3-1: config 0 descriptor?? [ 455.431970][T23143] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 455.454232][ T29] audit: type=1326 audit(2009.263:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23149 comm="syz.5.7539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8adf79c629 code=0x7ffc0000 [ 455.470970][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 455.556143][ T29] audit: type=1326 audit(2009.263:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23149 comm="syz.5.7539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8adf79c629 code=0x7ffc0000 [ 455.743240][ T9] usb 3-1: USB disconnect, device number 67 [ 455.926795][ T5856] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 456.081064][ T5856] usb 2-1: Using ep0 maxpacket: 16 [ 456.117124][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.149051][ T5856] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 456.192829][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.235014][ T5856] usb 2-1: config 0 descriptor?? [ 456.590885][T23228] netlink: 'syz.5.7564': attribute type 39 has an invalid length. [ 456.638331][ T5856] input: HID 041e:3100 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:041E:3100.006E/input/input90 [ 456.772186][ T5856] creative-sb0540 0003:041E:3100.006E: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.1-1/input0 [ 456.887516][ T945] usb 2-1: USB disconnect, device number 78 [ 456.940139][T23241] loop8: detected capacity change from 0 to 8 [ 456.979993][T23241] Dev loop8: unable to read RDB block 8 [ 457.005395][T23241] loop8: unable to read partition table [ 457.040466][T23241] loop8: partition table beyond EOD, truncated [ 457.050338][T23239] fido_id[23239]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 457.071953][T23241] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 457.260242][ T5917] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 457.376701][T23269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7575'. [ 457.416778][T23269] chnl_net:caif_netlink_parms(): no params data found [ 457.443143][ T5917] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 457.474346][ T5917] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 457.498935][ T5917] usb 4-1: config 1 interface 0 has no altsetting 0 [ 457.528206][ T5917] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 457.568077][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.595347][ T5917] usb 4-1: Product: syz [ 457.603057][ T5917] usb 4-1: Manufacturer: syz [ 457.607686][ T5917] usb 4-1: SerialNumber: syz [ 457.651714][T23250] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 457.680232][T23250] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 458.166451][T23306] netlink: 'syz.1.7590': attribute type 4 has an invalid length. [ 458.174537][T23306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7590'. [ 458.666317][ T5917] (unnamed net_device) (uninitialized): Assigned a random MAC address: fa:4e:74:84:2c:6b [ 458.689448][T23326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7598'. [ 458.699142][ T5917] rtl8150 4-1:1.0: eth5: rtl8150 is detected [ 458.715172][ T5917] usb 4-1: USB disconnect, device number 78 [ 458.910507][ T24] hid_parser_main: 1 callbacks suppressed [ 458.910528][ T24] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 458.939170][ T24] hid-generic 0000:0000:0000.006F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 459.674583][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 459.674605][ T29] audit: type=1400 audit(2014.207:1112): avc: denied { create } for pid=23364 comm="syz.3.7613" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 459.819953][T23368] raw_sendmsg: syz.1.7614 forgot to set AF_INET. Fix it! [ 460.027145][ T29] audit: type=1400 audit(2014.575:1113): avc: denied { read } for pid=23381 comm="syz.1.7620" path="socket:[82599]" dev="sockfs" ino=82599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 460.184410][ T5856] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 460.356035][ T5856] usb 4-1: Using ep0 maxpacket: 32 [ 460.362668][ T5856] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 460.373171][ T5856] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 460.385304][ T5856] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 460.396418][ T5856] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 460.411901][ T5856] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 460.421640][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.430311][ T5856] usb 4-1: Product: syz [ 460.434555][ T5856] usb 4-1: Manufacturer: syz [ 460.439141][ T5856] usb 4-1: SerialNumber: syz [ 460.448564][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 460.456847][ T5856] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input91 [ 460.537028][ T24] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 460.670481][ T5856] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 460.678847][ T5856] (id 0x00) [ 460.691257][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 460.706633][ T24] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 460.717496][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 460.727161][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 460.729256][ T5856] rc_core: IR keymap rc-imon-pad not found [ 460.747101][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 460.761098][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 460.770724][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 460.773719][ T5856] Registered IR keymap rc-empty [ 460.785683][ T5856] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 460.797454][ T5856] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 460.840178][ T24] usb 2-1: Product: syz [ 460.851230][ T24] usb 2-1: Manufacturer: syz [ 460.852429][ T5856] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 460.874594][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 460.888209][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 460.893102][ T5856] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input92 [ 460.908835][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 460.922183][ T5856] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:79> initialized [ 460.938995][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 461.152503][ T5856] usb 4-1: USB disconnect, device number 79 [ 461.239323][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 461.246055][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 461.254325][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 461.256118][T23425] tun1: tun_chr_ioctl cmd 1074025675 [ 461.260932][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 461.261868][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 461.267510][T23425] tun1: persist enabled [ 461.272751][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 461.273428][ T24] usb 2-1: USB disconnect, device number 79 [ 461.279445][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 461.279463][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 461.279477][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 461.334926][T23425] tun1: tun_chr_ioctl cmd 1074025675 [ 461.355983][T23425] tun1: persist enabled [ 461.467834][T23431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7642'. [ 461.645016][T23437] ------------[ cut here ]------------ [ 461.651095][T23437] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7) [ 461.665165][T23437] WARNING: drivers/net/wireless/virtual/mac80211_hwsim.c:2693 at mac80211_hwsim_sta_rc_update+0x5db/0x840, CPU#0: syz.2.7645/23437 [ 461.679387][T23437] Modules linked in: [ 461.684498][T23437] CPU: 0 UID: 0 PID: 23437 Comm: syz.2.7645 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.696086][T23437] Tainted: [L]=SOFTLOCKUP [ 461.700835][T23437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 461.710943][T23437] RIP: 0010:mac80211_hwsim_sta_rc_update+0x5fd/0x840 [ 461.717730][T23437] Code: 00 48 8d 3d f5 fe c0 09 48 8b 4c 24 10 48 8b 44 24 20 89 da 44 8b 89 c0 01 00 00 55 48 8d b0 72 05 00 00 41 57 44 8b 44 24 14 <67> 48 0f b9 3a 58 5a e9 3c fc ff ff e8 52 b3 e3 fa e8 fd 67 6a 04 [ 461.738156][T23437] RSP: 0018:ffffc9000442f120 EFLAGS: 00010246 [ 461.744339][T23437] RAX: ffff8880376eea90 RBX: 0000000000000000 RCX: ffff88805cac4ec0 [ 461.752364][T23437] RDX: 0000000000000000 RSI: ffff8880376ef002 RDI: ffffffff90e5e630 [ 461.760380][T23437] RBP: 0000000000000007 R08: 0000000000000014 R09: 0000000000000000 [ 461.768710][T23437] R10: 0000000000000007 R11: 0000000000000000 R12: dffffc0000000000 [ 461.776761][T23437] R13: ffff88805cac5090 R14: ffff88807b7b3100 R15: 000000000000000a [ 461.784740][T23437] FS: 00007f30d57d96c0(0000) GS:ffff88812434a000(0000) knlGS:0000000000000000 [ 461.794018][T23437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.801334][T23437] CR2: 0000200000001080 CR3: 000000003ddc3000 CR4: 00000000003526f0 [ 461.809409][T23437] Call Trace: [ 461.812730][T23437] [ 461.815688][T23437] ? __pfx_mac80211_hwsim_sta_add+0x10/0x10 [ 461.821570][T23437] mac80211_hwsim_sta_add+0xc9/0x290 [ 461.827077][T23437] drv_sta_state+0x887/0x1960 [ 461.831753][T23437] sta_info_insert_rcu+0x170b/0x2fa0 [ 461.837070][T23437] sta_info_insert+0x16/0xd0 [ 461.841655][T23437] ieee80211_add_station+0x471/0x6d0 [ 461.846959][T23437] nl80211_new_station+0x145b/0x1dd0 [ 461.852526][T23437] ? __pfx_nl80211_new_station+0x10/0x10 [ 461.858154][T23437] ? nl80211_pre_doit+0x19a/0xae0 [ 461.863220][T23437] genl_family_rcv_msg_doit+0x214/0x300 [ 461.868766][T23437] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 461.874980][T23437] ? bpf_lsm_capable+0x9/0x10 [ 461.879661][T23437] ? security_capable+0x80/0x260 [ 461.885265][T23437] ? ns_capable+0xd2/0xf0 [ 461.889630][T23437] genl_rcv_msg+0x560/0x800 [ 461.894143][T23437] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.899183][T23437] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 461.904628][T23437] ? __pfx_nl80211_new_station+0x10/0x10 [ 461.910718][T23437] ? __pfx_nl80211_post_doit+0x10/0x10 [ 461.916204][T23437] netlink_rcv_skb+0x159/0x420 [ 461.921067][T23437] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.926094][T23437] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.931415][T23437] ? netlink_deliver_tap+0x1ae/0xcc0 [ 461.936693][T23437] genl_rcv+0x28/0x40 [ 461.940988][T23437] netlink_unicast+0x5aa/0x870 [ 461.945770][T23437] ? __pfx_netlink_unicast+0x10/0x10 [ 461.951450][T23437] netlink_sendmsg+0x8b0/0xda0 [ 461.956392][T23437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.961692][T23437] ? __might_fault+0xc0/0x140 [ 461.966700][T23437] ____sys_sendmsg+0xa54/0xc30 [ 461.971476][T23437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.976796][T23437] ? __pfx_futex_wake_mark+0x10/0x10 [ 461.982215][T23437] ___sys_sendmsg+0x190/0x1e0 [ 461.986914][T23437] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.992131][T23437] __sys_sendmsg+0x170/0x220 [ 461.996995][T23437] ? __pfx___sys_sendmsg+0x10/0x10 [ 462.002095][T23437] ? __x64_sys_futex+0x34f/0x4d0 [ 462.007181][T23437] do_syscall_64+0x106/0xf80 [ 462.011778][T23437] ? clear_bhb_loop+0x40/0x90 [ 462.016626][T23437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.022519][T23437] RIP: 0033:0x7f30d499c629 [ 462.027274][T23437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.046924][T23437] RSP: 002b:00007f30d57d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.055586][T23437] RAX: ffffffffffffffda RBX: 00007f30d4c15fa0 RCX: 00007f30d499c629 [ 462.063588][T23437] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 462.071581][T23437] RBP: 00007f30d4a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 462.079702][T23437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.087992][T23437] R13: 00007f30d4c16038 R14: 00007f30d4c15fa0 R15: 00007fff0018d7d8 [ 462.096004][T23437] [ 462.099336][T23437] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 462.106626][T23437] CPU: 0 UID: 0 PID: 23437 Comm: syz.2.7645 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.117540][T23437] Tainted: [L]=SOFTLOCKUP [ 462.121841][T23437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 462.131875][T23437] Call Trace: [ 462.135140][T23437] [ 462.138057][T23437] dump_stack_lvl+0x100/0x190 [ 462.142728][T23437] vpanic+0x552/0x970 [ 462.146689][T23437] ? __pfx_vpanic+0x10/0x10 [ 462.151178][T23437] panic+0xd1/0xe0 [ 462.154885][T23437] ? __pfx_panic+0x10/0x10 [ 462.159309][T23437] check_panic_on_warn.cold+0x19/0x34 [ 462.164663][T23437] ? mac80211_hwsim_sta_rc_update+0x5db/0x840 [ 462.170719][T23437] __warn.cold+0x191/0x348 [ 462.175120][T23437] __report_bug+0x296/0x3d0 [ 462.179631][T23437] ? mac80211_hwsim_sta_rc_update+0x5db/0x840 [ 462.185690][T23437] ? __pfx___report_bug+0x10/0x10 [ 462.190701][T23437] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 462.196495][T23437] ? __bfs+0x150/0x2a0 [ 462.200560][T23437] report_bug_entry+0xe1/0x290 [ 462.205315][T23437] ? mac80211_hwsim_sta_rc_update+0x5fd/0x840 [ 462.211372][T23437] handle_bug+0x1c9/0x2a0 [ 462.215703][T23437] exc_invalid_op+0x17/0x50 [ 462.220191][T23437] asm_exc_invalid_op+0x1a/0x20 [ 462.225025][T23437] RIP: 0010:mac80211_hwsim_sta_rc_update+0x5fd/0x840 [ 462.231703][T23437] Code: 00 48 8d 3d f5 fe c0 09 48 8b 4c 24 10 48 8b 44 24 20 89 da 44 8b 89 c0 01 00 00 55 48 8d b0 72 05 00 00 41 57 44 8b 44 24 14 <67> 48 0f b9 3a 58 5a e9 3c fc ff ff e8 52 b3 e3 fa e8 fd 67 6a 04 [ 462.251293][T23437] RSP: 0018:ffffc9000442f120 EFLAGS: 00010246 [ 462.257340][T23437] RAX: ffff8880376eea90 RBX: 0000000000000000 RCX: ffff88805cac4ec0 [ 462.265293][T23437] RDX: 0000000000000000 RSI: ffff8880376ef002 RDI: ffffffff90e5e630 [ 462.273272][T23437] RBP: 0000000000000007 R08: 0000000000000014 R09: 0000000000000000 [ 462.281239][T23437] R10: 0000000000000007 R11: 0000000000000000 R12: dffffc0000000000 [ 462.289199][T23437] R13: ffff88805cac5090 R14: ffff88807b7b3100 R15: 000000000000000a [ 462.297175][T23437] ? __pfx_mac80211_hwsim_sta_add+0x10/0x10 [ 462.303063][T23437] mac80211_hwsim_sta_add+0xc9/0x290 [ 462.308361][T23437] drv_sta_state+0x887/0x1960 [ 462.313030][T23437] sta_info_insert_rcu+0x170b/0x2fa0 [ 462.318308][T23437] sta_info_insert+0x16/0xd0 [ 462.322880][T23437] ieee80211_add_station+0x471/0x6d0 [ 462.328151][T23437] nl80211_new_station+0x145b/0x1dd0 [ 462.333438][T23437] ? __pfx_nl80211_new_station+0x10/0x10 [ 462.339108][T23437] ? nl80211_pre_doit+0x19a/0xae0 [ 462.344141][T23437] genl_family_rcv_msg_doit+0x214/0x300 [ 462.349681][T23437] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 462.355742][T23437] ? bpf_lsm_capable+0x9/0x10 [ 462.360400][T23437] ? security_capable+0x80/0x260 [ 462.365345][T23437] ? ns_capable+0xd2/0xf0 [ 462.369662][T23437] genl_rcv_msg+0x560/0x800 [ 462.374155][T23437] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.379164][T23437] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 462.384521][T23437] ? __pfx_nl80211_new_station+0x10/0x10 [ 462.390145][T23437] ? __pfx_nl80211_post_doit+0x10/0x10 [ 462.395601][T23437] netlink_rcv_skb+0x159/0x420 [ 462.400352][T23437] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.405363][T23437] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 462.410651][T23437] ? netlink_deliver_tap+0x1ae/0xcc0 [ 462.415920][T23437] genl_rcv+0x28/0x40 [ 462.419884][T23437] netlink_unicast+0x5aa/0x870 [ 462.424633][T23437] ? __pfx_netlink_unicast+0x10/0x10 [ 462.429923][T23437] netlink_sendmsg+0x8b0/0xda0 [ 462.434673][T23437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.439940][T23437] ? __might_fault+0xc0/0x140 [ 462.444612][T23437] ____sys_sendmsg+0xa54/0xc30 [ 462.449367][T23437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.454642][T23437] ? __pfx_futex_wake_mark+0x10/0x10 [ 462.459914][T23437] ___sys_sendmsg+0x190/0x1e0 [ 462.464579][T23437] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.469788][T23437] __sys_sendmsg+0x170/0x220 [ 462.474367][T23437] ? __pfx___sys_sendmsg+0x10/0x10 [ 462.479467][T23437] ? __x64_sys_futex+0x34f/0x4d0 [ 462.484398][T23437] do_syscall_64+0x106/0xf80 [ 462.488968][T23437] ? clear_bhb_loop+0x40/0x90 [ 462.493628][T23437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.499504][T23437] RIP: 0033:0x7f30d499c629 [ 462.503903][T23437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.523491][T23437] RSP: 002b:00007f30d57d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.531885][T23437] RAX: ffffffffffffffda RBX: 00007f30d4c15fa0 RCX: 00007f30d499c629 [ 462.539833][T23437] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 462.547783][T23437] RBP: 00007f30d4a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 462.555731][T23437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.563681][T23437] R13: 00007f30d4c16038 R14: 00007f30d4c15fa0 R15: 00007fff0018d7d8 [ 462.571643][T23437] [ 462.574905][T23437] Kernel Offset: disabled [ 462.579203][T23437] Rebooting in 86400 seconds..